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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of 
claims in the application: 

Listing of Claims: 

1-14. (Cancelled) 

15. (Previously Presented) The method of claim 34, wherein at least 
one of said operations in the first chain of operations comprises an exclusive OR. 

16. (Previously Presented) The method of claim 34, wherein at least 
one of said operations in the first chain of operations comprises an operation of bit 
permutation of an intermediate result obtained from execution of an operation of said 
first chain of operations preceding said operation of bit permutation within said first 
chain of operations. 

17. (Previously Presented) The method of claim 34, wherein at least 
one of said operations in the first chain of operations comprises an operation of 
indexed access to a table. 

18. (Previously Presented) The method of claim 34, wherein at least 
one of said operations in the first chain of operations comprises an operation which 
is stable with respect to the application of an exclusive OR function. 

19. (Previously Presented) The method of claim 34, wherein at least 
one of said operations in the first chain of operations comprises an operation of 
transfer of an intermediate result obtained from execution of an operation of said first 
chain of operations preceding said operation of transfer within said first chain of 
operations, from one location to another one in a storage space. 
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20.-22. (Cancelled) 

23. (Currently Amended) The method of claim 34, wherein the step of 
randomly choosing comprises generating a random parameter that is used to identify 
which of said groups operations to choose, and wherein said method further 
comprises updating, in parallel with each executed operation, information to be used 
during the step of outputting the resultant message to determine whether to output 
the result of the last operation in the uncomplemented state or the complemented 
state as the resultant message. 

24. (Previously Presented) The method of claim 34, wherein the step 
of randomly choosing comprises a step of computing a parameter which is equal to a 
difference between a number of times when an operation of the first chain of 
operations is executed and a number of times when an operation of the second 
chain of operations is executed, and when the difference exceeds a given threshold, 
the step of randomly choosing is conducted so as to decrease the difference. 

25. - 26. (Cancelled) 

27. (Currently Amended) The method of claim 34, wherein the step of 
storing, at the microcircuit card , the second set of instructions comprises storing 
instructions for a succession of operations each corresponding to a complement byte 
by byte of a rospoct i vo one of the operations in the first chain of operations. 

28. (Currently Amended) The method of claim 34, wherein the step of 
storing, at the microcircuit card , the second set of instructions comprises storing 
instructions for a succession of operations each corresponding to a complement bit 
by bit of a rospoct i vo one of the operations in the first chain of operations. 
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29. (Currently Amended) The method of claim 34, wherein the step of 
storing a socond the second set of instructions for the second chain of operations 
further comprises a step of applying a permutation of the order of successive 
commutative operations in the first chain of operations before storing said second set 
of instructions. 

30. (Previously Presented) The method of claim 29, wherein the step 
of determining a permutation of the order of successive commutative operations is 
carried out randomly. 

31 . (Previously Presented) The method of claim 34, wherein the step 
of identifying comprises a step of determining the plurality of operations in said third 
group, said step of determining comprising generating a random parameter before 
the random selection of the operations from either the first chain of operations or 
from the second chain of operations and updating a complementation counter, and 
the step of outputting the resultant message includes deciding to output the result of 
the last operation in the uncomplemented state or in the complemented state 
depending on a state of the complementation counter. 

32. (Currently Amended) The method of claim 34, wherein the step of 
identifying comprises a step of determining the plurality of operations in said third 
group, said step of determining comprising generating a random parameter before 
the random selection of an op e rat i on the operations from either the first chain of 
operations or the second chain of operations and wherein said method further 
comprises updating, in parallel with each operation, information to be used during 
the step of outputting the resultant message to determine whether to output the 
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result of the last operation in the uncomplemented state or the complemented state 
as the resultant message. 

33. (Previously Presented) The method of claim 34, wherein the step 
of identifying comprises a step of determining the plurality of operations in said third 
group, said step of determining comprising a step of computing a parameter which is 
equal to a difference between a number of times when an operation of the first chain 
of operations is executed and a number of times when an operation of the second 
chain of operations is executed, and when the difference exceeds a given threshold, 
a next operation to be included in the selected chain of operations in said third group 
is selected from either the first chain of operations or the second chain of operations 
so as to decrease this difference. 

34 (Currently amended) A method of executing and validating a 
cryptographic protocol between a server entity and a microcircuit card in order to 
resist a PPA- Differential Power Analysis attack against the microcircuit card during 
execution of said cryptographic protocol, said method comprising the steps of: 

storing a first set of instructions for a first chain of operations and a key 
in both the server entity and the microcircuit card, said first chain of operations 
forming a data encryption method providing a Data Encryption Standard , 

storing, at the microcircuit card, a second set of instructions for a 
second chain of operations based on the first chain of operations stored in said 
microcircuit card, said second chain of operations comprising a succession of 
operations each corresponding to a complement of a respective one of the 
operations in the first chain of operations, 
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sending a mossaqo request from said server entity to said microcircuit 
card for generating a message and sending this message to the server entity , 

executing, at the server entity, said first set of instructions for the first 
chain of operations stored therein using said key and said message when received 
to obtain a server result, 

identifying, in the microcircuit card , after reception of the reguest from 
the server entity , a selected chain of operations, said step of identifying comprising 
randomly choosing one of the following groups as said selected chain: 1) all of the 
operations in said first chain of operations stored in the microcircuit card : or 2) all of 
the operations in said second chain of operations stored in this microcircuit card as 
well as an additional complementation instruction : or 3) a p l ura li ty of operat i ons 
compr i s i ng a random so l oct i on of at l oast ono of tho operat i ons i n sa i d f i rst cha i n of 
op e rat i ons and at le ast on e of th e op e rat i ons i n sa i d s e cond cha i n of op e rat i ons, sa i d 
p l ura li ty of operat i ons compr i s i ng, for oach operat i on of tho f i rst cha i n of operat i ons, 
o i thor sa i d operat i on or tho rospoct i vo operat i on i n tho second cha i n of operat i ons 
correspond i ng to sa i d operat i on, 

executing with this key and this message , in the microcircuit card, 
instructions for the identified and selected chain of operations on sa i d mossago , 

outputting a result of a last operation oxocutod i n sa i d i dont i f i od cha i n 
of op e rat i ons ei th e r i n an uncomp le m e nt e d stat e or a comp le m e nt e d stat e of the 
identified and selected chain of operations as a resultant message, 

comparing the resultant message to the server result, and 

validating the cryptographic protocol between the server entity and the 
microcircuit card when the server result and the resultant message are identical. 
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35. (Cancelled) 

36. (New) A method of executing and validating a cryptographic 
protocol between a server entity and a microcircuit card in order to resist a 
Differential Power Analysis attack against the microcircuit card during execution of 
said cryptographic protocol, said method comprising the steps of: 

storing a first set of instructions for a first chain of operations and one 
key in both the server entity and the microcircuit card, said first chain of operations 
forming a data encryption method providing a Data Encryption Standard, 

storing, at the microcircuit card, a second set of instructions for a 
second chain of operations based on the first chain of operations stored in said 
microcircuit card, said second chain of operations comprising a succession of 
operations each corresponding to a complement of a respective one of the 
operations in the first chain of operations, 

sending a message from said server entity to said microcircuit card, 

executing, at the server entity, said first set of instructions for the first 
chain of operations stored therein using said one key and said message to obtain a 
server result, 

identifying, in the microcircuit card upon reception by said microcircuit 
card of the message coming from the server entity, a selected chain of operations, 
said step of identifying comprising randomly selecting for each operation of the first 
chain of operations in said microcircuit card either said each operation or a 
respective operation in the second chain of operations in said microcircuit card; 

executing, in the microcircuit card, instructions for the identified and 
selected chain of operations using said one key and said message, 
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outputting a result of a last operation executed in said identified and 
selected chain of operations either in an uncomplemented state or a complemented 
state as a resultant message, depending on a number representative of the 
successive random selections, 

comparing the resultant message to the server result, and 

validating the cryptographic protocol between the server entity and the 
microcircuit card when the server result and the resultant message are identical. 

37. (New) The method of claim 36, wherein the step of executing in the 
microcircuit card further comprises a selection between using the message as it is or 
using the message in complemented form. 



